CN112559003B - Domain controller software upgrading method and device and domain controller - Google Patents
Domain controller software upgrading method and device and domain controller Download PDFInfo
- Publication number
- CN112559003B CN112559003B CN202011287052.3A CN202011287052A CN112559003B CN 112559003 B CN112559003 B CN 112559003B CN 202011287052 A CN202011287052 A CN 202011287052A CN 112559003 B CN112559003 B CN 112559003B
- Authority
- CN
- China
- Prior art keywords
- microprocessor
- main
- auxiliary
- upgrading
- software
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/65—Updates
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
- B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
- B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
- B60R16/023—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for transmission of signals between vehicle parts or subsystems
- B60R16/0231—Circuits relating to the driving or the functioning of the vehicle
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/70—Software maintenance or management
- G06F8/71—Version control; Configuration management
Landscapes
- Engineering & Computer Science (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Automation & Control Theory (AREA)
- Mechanical Engineering (AREA)
- Stored Programmes (AREA)
Abstract
The embodiment of the specification discloses a domain controller software upgrading method, a device and a domain controller, wherein the method comprises the following steps: if a software upgrading request aiming at the domain controller is detected, controlling the auxiliary microprocessor to enter a master control mode; upgrading the software of the main microprocessor based on the acquired software upgrading package; in the process of software upgrading of the main microprocessor, monitoring the upgrading state of the main microprocessor through the auxiliary microprocessor to obtain monitoring information; and determining whether the main microprocessor is upgraded successfully or not based on the monitoring information. In the scheme, the auxiliary microprocessor is used for controlling each mechanism when the software of the main microprocessor is upgraded, so that the normal operation of the vehicle in the upgrading process of the main microprocessor is ensured, and the software of the main microprocessor is upgraded while the vehicle is normally operated.
Description
Technical Field
The embodiment of the specification relates to the technical field of automobiles, in particular to a domain controller software upgrading method and device and a domain controller.
Background
With the rapid development of automobile intellectualization and electronization, an automobile Electronic architecture is increasingly complex, the number of vehicle-mounted Electronic Control Units (ECU) is more and more, in order to improve the compatibility of the architecture, reduce the development cost and shorten the development period, a vehicle is divided into a plurality of domains, such as a vehicle body domain, a power domain, an information security domain and the like, and a domain controller of each domain is used as a core of the domain and a junction for information interaction across the domains.
The domain controller is one of the core components of the automobile, software iteration upgrading is required to be continuously carried out to meet new functions and new requirements, and meanwhile, as the proportion of software development in automobile model development work is gradually increased, the subsequent software bugs cause complaints of users and vehicle faults to be increased. Through the traditional software upgrading mode, the vehicle of a user arrives at a store, and is connected with a diagnosis interface of the whole vehicle through a diagnosis instrument or other special upgrading equipment, so that the upgrading of the vehicle-mounted software can be realized, the upgrading mode is low in efficiency, and the cost of after-sale maintenance and new function upgrading is huge.
Disclosure of Invention
The embodiment of the specification provides a domain controller software upgrading method, a domain controller software upgrading device and a domain controller.
In a first aspect, an embodiment of the present specification provides a domain controller software upgrading method, where a domain controller includes a main microprocessor and a secondary microprocessor, and the method includes:
if a software upgrading request aiming at the domain controller is detected, controlling the auxiliary microprocessor to enter a master control mode;
upgrading the software of the main microprocessor based on the acquired software upgrading package;
in the process of software upgrading of the main microprocessor, monitoring the upgrading state of the main microprocessor through the auxiliary microprocessor to obtain monitoring information;
and determining whether the main microprocessor is upgraded successfully or not based on the monitoring information.
Optionally, the domain controller includes a main power supply module, where the main power supply module is configured to supply power to the main microprocessor, and the determining, based on the monitoring information, whether the main microprocessor is successfully upgraded includes:
when the monitoring information indicates that the upgrading state of the main microprocessor is abnormal, the auxiliary microprocessor controls the main power supply module to reset so as to reset the main microprocessor;
determining the current reset times of the main microprocessor, and determining whether the reset times are greater than preset times;
and if so, determining that the upgrading of the main microprocessor fails.
Optionally, after determining whether the reset time is greater than a preset time, the method further includes:
and if the reset times are less than or equal to the preset times, based on the software upgrading packet, carrying out software upgrading on the main microprocessor again.
Optionally, the domain controller includes an auxiliary storage module, the auxiliary storage module stores a backup software upgrade package of a previous version, and after determining whether the main microprocessor is upgraded successfully based on the monitoring information, the method further includes:
and after the upgrading of the main microprocessor fails, restoring the software version of the main microprocessor to the previous version based on the backup software upgrading package.
Optionally, after determining whether the upgrade of the main microprocessor is successful based on the monitoring information, the method further includes:
and after the main microprocessor is upgraded successfully, controlling the auxiliary microprocessor to exit the main control mode and controlling the main microprocessor to enter the main control mode.
Optionally, the domain controller includes an auxiliary storage module, where the auxiliary storage module stores a backup software upgrade package of a previous version, and the method further includes:
in the upgrading process of the main microprocessor, detecting whether the auxiliary microprocessor receives a handshake signal sent by the main microprocessor within a first preset time;
if not, based on the backup software upgrading package, the software version of the main microprocessor is restored to the previous version, and the main microprocessor is controlled to enter a main control mode.
Optionally, after the determining whether the upgrade of the master microprocessor is successful, the method further comprises:
detecting whether the auxiliary microprocessor receives a Limp home signal sent by the main microprocessor within a second preset time length or not, and determining whether the Limp home signal is accurate or not;
and if so, controlling the main microprocessor to enter the main control mode, and controlling the auxiliary microprocessor to exit the main control mode.
In a second aspect, an embodiment of the present specification provides a domain controller software upgrading apparatus, where a domain controller includes a main microprocessor and an auxiliary microprocessor, and the apparatus includes:
the control module is used for controlling the auxiliary microprocessor to enter a master control mode if a software upgrading request aiming at the domain controller is detected;
the first upgrading module is used for upgrading the software of the main microprocessor based on the acquired software upgrading package;
the monitoring module is used for monitoring the upgrading state of the main microprocessor through the auxiliary microprocessor in the process of upgrading the software of the main microprocessor to obtain monitoring information;
and the determining module is used for determining whether the main microprocessor is upgraded successfully or not based on the monitoring information.
Optionally, the domain controller includes a main power supply module, the main power supply module is configured to supply power to the main microprocessor, and the determining module is configured to:
when the monitoring information indicates that the upgrading state of the main microprocessor is abnormal, the auxiliary microprocessor controls the main power supply module to reset so as to reset the main microprocessor;
determining the current reset times of the main microprocessor, and determining whether the reset times are greater than preset times;
and if so, determining that the upgrading of the main microprocessor fails.
Optionally, the apparatus further comprises:
and the second upgrading module is used for upgrading the software of the main microprocessor again based on the software upgrading package if the resetting times are less than or equal to the preset times.
Optionally, the domain controller includes an auxiliary storage module, where the auxiliary storage module stores a backup software upgrade package of a previous version, and the apparatus further includes:
and the software recovery module is used for recovering the software version of the main microprocessor to the previous version based on the backup software upgrading package after the upgrading of the main microprocessor fails.
Optionally, the apparatus further comprises:
and the first control module is used for controlling the auxiliary microprocessor to exit the master control mode and controlling the main microprocessor to enter the master control mode after the main microprocessor is successfully upgraded.
Optionally, the domain controller includes an auxiliary storage module, where the auxiliary storage module stores a backup software upgrade package of a previous version, and the apparatus further includes:
the first detection module is used for detecting whether the auxiliary microprocessor receives a handshake signal sent by the main microprocessor within a first preset time length in the upgrading process of the main microprocessor;
and the second control module is used for restoring the software version of the main microprocessor to the previous version based on the backup software upgrading package and controlling the auxiliary microprocessor to enter the master control mode when the auxiliary microprocessor does not receive the handshake signal sent by the main microprocessor within the first preset time.
Optionally, the apparatus further comprises:
the second detection module is used for detecting whether the auxiliary microprocessor receives the Lipp home signal sent by the main microprocessor within a second preset time length or not and determining whether the Lipp home signal is accurate or not;
and the third control module is used for controlling the main microprocessor to enter the main control mode and controlling the auxiliary microprocessor to exit the main control mode when the auxiliary microprocessor does not receive a correct Lipmp home signal within a second preset time length.
In a third aspect, an embodiment of the present specification provides a domain controller, including:
a main microprocessor, an auxiliary microprocessor;
the main microprocessor is in communication connection with the auxiliary microprocessor;
the auxiliary microprocessor is used for entering a master control mode when detecting a software upgrading request aiming at the domain controller;
the main microprocessor is used for upgrading based on the acquired software upgrading package;
and in the process of upgrading the software of the main microprocessor, the auxiliary microprocessor is used for monitoring the upgrading state of the main microprocessor, acquiring monitoring information and determining whether the main microprocessor is upgraded successfully or not based on the monitoring information.
Optionally, the domain controller further comprises:
the main storage module is in communication connection with the main microprocessor and used for storing the software upgrading package;
the auxiliary storage module is in communication connection with the auxiliary microprocessor and is used for storing the backup software upgrading package of the previous version;
the main power supply module is connected with the main microprocessor and the main storage module and used for supplying power to the main microprocessor and the main storage module;
and the auxiliary power module is connected with the auxiliary microprocessor and the auxiliary storage module and used for supplying power to the auxiliary microprocessor and the auxiliary storage module.
In a fourth aspect, the present specification provides a computer readable storage medium, on which a computer program is stored, which when executed by a processor implements the steps of any of the above methods.
The embodiment of the specification has the following beneficial effects:
in the domain controller software upgrading method provided in the embodiments of the present specification, a domain controller includes a main microprocessor and an auxiliary microprocessor, and when a software upgrading request for the domain controller is detected, the auxiliary microprocessor is controlled to enter a main control mode; upgrading the software of the main microprocessor based on the acquired software upgrading package; in the process of software upgrading of the main microprocessor, the upgrading state of the main microprocessor is monitored through the auxiliary microprocessor to obtain monitoring information; and determining whether the main micro-processor is upgraded successfully or not based on the monitoring information. In the scheme, the domain controller comprises the main microprocessor and the auxiliary microprocessors, and the auxiliary microprocessors are used for controlling each mechanism when software of the main microprocessor is upgraded, so that normal running of a vehicle in the upgrading process of the main microprocessor is ensured, and the software of the main microprocessor is upgraded while the vehicle runs normally.
Drawings
Various additional advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The drawings are only for purposes of illustrating the preferred embodiments and are not to be construed as limiting the specification. Also, like reference numerals are used to refer to like parts throughout the drawings. In the drawings:
fig. 1 is a schematic architecture diagram of a domain controller according to an embodiment of the present disclosure;
fig. 2 is an information interaction diagram in an OTA upgrade process provided in an embodiment of the present specification;
fig. 3 is a flowchart of a domain controller software upgrading method provided in the first aspect of the embodiments of the present specification;
fig. 4 is a flowchart of upgrading domain controller software according to an embodiment of the present disclosure;
fig. 5 is a schematic diagram of a domain controller software upgrading device provided in a second aspect of the embodiments of the present specification;
fig. 6 is a schematic diagram of a domain controller provided in a third aspect of the embodiments of the present specification.
Detailed Description
In order to better understand the technical solutions of the embodiments of the present specification, the technical solutions of the embodiments of the present specification are described in detail below with reference to the accompanying drawings and specific embodiments, and it should be understood that the specific features of the embodiments and examples of the present specification are detailed descriptions of the technical solutions of the embodiments of the present specification, and are not limitations of the technical solutions of the embodiments and examples of the present specification, and the technical features of the embodiments and examples of the present specification may be combined with each other without conflict.
In a first aspect, in this embodiment of the present specification, when performing software upgrade on a domain controller, an OTA (Over-the-Air Technology) may be used to upgrade the domain controller. Specifically, in the OTA upgrading process of the domain controller, the domain controller software package can be stored in a server of a host factory, a vehicle-mounted OTA terminal is arranged on a vehicle, the domain controller software package sent by the server can be received through the vehicle-mounted OTA terminal, after security authentication is carried out through an OTA terminal controller and a central gateway, the central gateway transmits the decrypted software package data to the domain controller, and after the domain controller receives the data, software upgrading is realized.
In order to ensure the security of the domain controller OTA upgrade process and the reliable and safe software upgrade of the vehicle, the embodiments of the present specification provide a security architecture of a dual MCU (microprocessor Unit) of the domain controller. As shown in fig. 1, which is a schematic structural diagram of a domain controller provided in this specification, the domain controller includes a main microprocessor (main MCU in fig. 1), an auxiliary microprocessor (auxiliary MCU in fig. 1), and the main and auxiliary MCUs are respectively provided with independent power modules SBC1 and SBC2; the main MCU and the auxiliary MCU are respectively provided with an independent data storage module Flash1 and an independent data storage module Flash2; the main MCU and the auxiliary MCU are respectively provided with an independent communication module CAN1 and an independent communication module CAN2; the main MCU and the auxiliary MCU are communicated through the SPI and the Limp home signal line, and the domain controller and the exterior of the OTA terminal of the vehicle CAN be communicated through the CAN.
The main MCU is a main object for OTA software upgrading, and the auxiliary MCU is a backup control unit serving as the main MCU. The power supply module SBC1 supplies power to the main MCU, the main MCU communication module CAN1 and the data storage module Flash 1; the power supply module SBC2 supplies power to the auxiliary MCU, the auxiliary MCU communication module CAN2 and the data storage module Flash 2. The Flash1 storage module is a storage medium for storing an OTA upgrading software package; and the Flash2 storage module is a storage medium for storing the OTA upgrade backup software package. CAN1 is the communication module of main MCU, CAN2 is the communication module of assisting MCU, and main MCU communication module is OTA upgrading main MCU's data transmission channel.
The method provided by the embodiment of the specification is a software OTA (over the air) safety upgrading method based on the domain controller double-MCU safety architecture, can realize a fault-tolerant mechanism of the domain controller during software upgrading, ensures that the domain controller function loss caused by the problems of OTA (over the air) flash failure, data incompleteness, upgrading packet error, upgrading interruption and the like can be avoided, and ensures the safe and reliable upgrading of domain controller software.
Next, an information interaction process in an OTA upgrade is described, as shown in fig. 2, which is an information interaction diagram in an OTA upgrade process provided in an embodiment of this specification. In the OTA upgrading process of the domain controller, the interaction among an OTA server, a vehicle-mounted OTA terminal, a central complete gateway and the domain controller is involved, and the specific implementation process is as follows:
301: when the current vehicle domain controller software has OTA requirements, the vehicle-mounted OTA terminal receives a domain controller software upgrading request message pushed by an OTA server;
302: after receiving the software upgrading push message, the user confirms that upgrading is needed;
303: the vehicle-mounted OTA terminal and the OTA server perform security authentication;
304: after the authentication is passed, the vehicle-mounted OTA terminal receives the domain software package data locally;
305: after the software packet data is received, the vehicle-mounted OTA terminal initiates a software data issuing request to the central security gateway;
306: the central security gateway initiates a security authentication request to the vehicle-mounted OTA terminal;
307: after the safety certification is passed, the vehicle central safety gateway initiates a software upgrading instruction to the domain controller;
308: the vehicle-mounted OTA terminal starts to transmit software upgrading packet data to the domain controller;
309: after the domain controller finishes receiving the software upgrading packet, the domain controller starts to initiate an OTA upgrading request to the central gateway;
310: after the central gateway comprehensively judges the vehicle condition (whether the voltage and the speed of a whole vehicle storage battery and the OTA of the domain controller influence the vehicle function), if the condition is met, the central security gateway informs the domain controller to start to execute software upgrading;
311: the domain controller starts to execute software upgrading;
312: and after the domain controller finishes software upgrading, feeding back an OTA upgrading result to the OTA server through the central security gateway and the vehicle-mounted OTA terminal.
The identity security authentication in the interaction means: for a specific vehicle, the vehicle-mounted OTA terminal, the domain controller and the central security gateway all have unique identity tags and VIN numbers of the vehicle, and the identity security authentication process is to determine that vehicle information stored in the vehicle-mounted OTA terminal, the central security gateway and the domain controller is in one-to-one correspondence through an encryption algorithm.
Further, in order to ensure that the domain controller can perform software upgrade safely and reliably, an embodiment of the present specification provides a domain controller software upgrade method, as shown in fig. 3, which is a flowchart of the domain controller software upgrade method provided by the embodiment of the present specification, and the method includes the following steps:
step S11: if a software upgrading request aiming at the domain controller is detected, controlling the auxiliary microprocessor to enter a master control mode;
step S12: upgrading the software of the main microprocessor based on the acquired software upgrading package;
step S13: in the process of software upgrading of the main microprocessor, monitoring the upgrading state of the main microprocessor through the auxiliary microprocessor to obtain monitoring information;
step S14: and determining whether the main microprocessor is upgraded successfully or not based on the monitoring information.
In the embodiment of the present description, when the domain controller does not perform software upgrade, the main microprocessor is in the master control mode, and the main microprocessor, i.e., the main MCU, communicates through the CAN1 domain central gateway. When the domain controller carries out software upgrading, in order to ensure the normal operation of the vehicle, the auxiliary microprocessor, namely the auxiliary MCU is switched to the main control mode, and the main MCU exits the main control mode to carry out software upgrading.
After the auxiliary MCU enters a master control mode, the main microprocessor carries out software upgrading according to the software upgrading package, the vehicle-mounted OTA terminal can store the software upgrading package in a storage module Flash1 of the main microprocessor after receiving the software upgrading package, and the main microprocessor can directly read the software upgrading package in the Flash1 to carry out upgrading operation.
In the upgrading process of the main microprocessor, the auxiliary microprocessor can monitor the main microprocessor through the SPI3 and/or the Limp home signal, for example, the auxiliary microprocessor can monitor the upgrading data frame period, the sequence and the like of the main microprocessor to obtain monitoring information.
And if the obtained monitoring information is in a normal range in the whole upgrading process of the main microprocessor, for example, the upgrading data frame period and the upgrading data frame sequence are normal, determining that the upgrading of the main microprocessor is successful. If abnormal information is detected or the number of times of abnormal occurrence reaches a preset number in the upgrading process of the bit processors, the upgrading failure of the main processor can be judged.
In a specific implementation process, step S13 may be implemented by: when the monitoring information indicates that the upgrading state of the main microprocessor is abnormal, the auxiliary microprocessor controls the main power supply module to reset so as to reset the main microprocessor; determining the current reset times of the main microprocessor, and determining whether the reset times are greater than preset times; if yes, determining that the upgrading of the main microprocessor fails.
Specifically, when the monitoring information indicates that the upgrade is abnormal, taking the monitoring information as an upgrade data frame period as an example, if the upgrade data frame period does not coincide with a preset period, the upgrade is abnormal. Because the auxiliary microprocessor is connected with the main power supply module which supplies power to the main microprocessor, when the upgrading is abnormal, the auxiliary microprocessor can send an instruction to the main power supply module to reset the main power supply module, and the reset operation of the main microprocessor is realized.
In the embodiment of the present specification, a preset number of times that the reset is allowed may be limited, for example, the preset number of times is 3 times, 5 times, and the like, and is not limited here. And after each reset operation, recording the reset times, judging whether the current reset times exceed the preset times, and if so, determining that the upgrade fails. And if the current reset times are less than or equal to the preset times, based on the software upgrading package, carrying out software upgrading on the main microprocessor again, namely, carrying out the upgrading operation of the main microprocessor again.
In order to ensure the normal operation of the main microprocessor after the upgrade fails, in the embodiment of the present specification, a backup software upgrade package of a previous version is stored in the auxiliary storage module, and after the upgrade of the main microprocessor fails, the software version of the main microprocessor is restored to the previous version based on the backup upgrade package.
Specifically, after the current reset times are greater than the preset times, the auxiliary microprocessor may reset the main power module again to reset the main microprocessor, and then the main microprocessor reads the backup software upgrade package of the previous version from the auxiliary storage module and performs software flash on the main microprocessor to restore the main microprocessor to the previous version.
And after the main microprocessor is successfully upgraded, controlling the auxiliary microprocessor to exit the main control mode and controlling the main microprocessor to enter the main control mode. Specifically, after the main microprocessor is successfully upgraded, the control of the main microprocessor is recovered, the functions of each domain controller are taken over, and simultaneously, the software upgrading package of the current version can be stored in the auxiliary storage module to be used as a backup software package for next software upgrading.
It should be noted that, the main microprocessor in the embodiment of the present specification includes a main control mode and an OTA mode, and the auxiliary microprocessor includes a main control mode and a non-main control mode. Under normal conditions, the main microprocessor is in a main control mode, the auxiliary microprocessor is in a non-main control mode, and in the upgrading process of the domain controller, the main microprocessor is in an OTA mode, and the auxiliary microprocessor is in the main control mode.
And a handshake connection exists between the main microprocessor and the auxiliary microprocessor, namely the main microprocessor can periodically send handshake signals to the auxiliary microprocessor. In order to ensure the reliability of the OTA upgrading process, in the embodiment of the present specification, in the upgrading process of the main microprocessor, it is detected whether the auxiliary microprocessor receives a handshake signal sent by the main microprocessor within a first preset time period; if not, based on the backup software upgrading package, the software version of the main microprocessor is restored to the previous version, and the main microprocessor is controlled to enter the main control mode.
Specifically, the master microprocessor periodically sends the handshake signals to the slave microprocessor, for example, the master microprocessor sends the handshake signals to the slave microprocessor through the CAN/SPI3 at a period of 100ms ± 10 ms. The handshake information may include the software upgrade process information, status information, etc. of the main microprocessor. If the auxiliary microprocessor receives the correct handshake signals within the first preset time period, the upgrading of the main microprocessor can be continued. If the auxiliary microprocessor does not receive the correct handshake signals within the first preset time, it indicates that the main microprocessor may have problems in the upgrading process, at this time, the upgrading of the main microprocessor may be terminated, and the version of the main microprocessor may be restored to the previous version based on the backup software package of the previous version. Meanwhile, after the main microprocessor restores the last version, the main microprocessor is controlled to enter the master control mode. It should be noted that the first preset time period may be set according to actual needs, for example, the first preset time period is 100 ms.
Further, if the main microprocessor is in the master control mode and the auxiliary microprocessor detects that the received handshake signals are abnormal, the main microprocessor CAN be considered to be abnormal, at the moment, the auxiliary microprocessor CAN take over the main power module and inform the central gateway and the T-box main microprocessor of the abnormality through the CAN, and the whole vehicle needs to enter a limp mode.
In addition, in the embodiment of the present specification, the main microprocessor may send a Limp home signal to the auxiliary microprocessor, and after determining whether the main microprocessor is upgraded successfully, detect whether the auxiliary microprocessor receives the Limp home signal sent by the main microprocessor within a second preset time period, and determine whether the Limp home signal is accurate; if yes, the main microprocessor is controlled to enter the main control mode, and the auxiliary microprocessor is controlled to exit the main control mode. For example, the Limp phone signal is a square wave of 50Hz +/-5 Hz, the duty ratio is 50% +/-10%, and the auxiliary microprocessor continuously monitors the Limp phone signal of the main microprocessor. The second preset time length can be set according to actual needs, taking the second preset time length as 100ms as an example, if the auxiliary microprocessor detects the Limp home signal of the main microprocessor within continuous 100ms and the Limp home signal is correct, the main microprocessor is controlled to enter the main control mode. And if the auxiliary microprocessor cannot detect the Limp home signal of the main microprocessor within continuous 100ms or the square wave frequency or the duty ratio of the Limp home detected within 100ms exceeds the deviation range, the main microprocessor is considered to be invalid.
To better explain the domain controller software upgrading method provided in the embodiment of the present specification, please refer to fig. 4, which is a flowchart of domain controller software upgrading provided in the embodiment of the present specification, where the flowchart is an upgrading process executed based on the security architecture of fig. 1, and the specific process is as follows:
401: the main MCU enters an OTA mode;
and after the domain controller main MCU receives a software upgrading instruction of the central security gateway, the main MCU enters an OTA mode.
402: the main MCU informs the auxiliary MCU to enter a main control mode;
in the OTA mode, the master MCU informs the slave MCU to enter the master control mode through the SPI3/CAN 1.
403: the auxiliary MCU enters a master control mode;
and the auxiliary MCU enters the master control mode after receiving the requirement of the main MCU on entering the master control mode.
404: the main MCU starts an OTA flash engine;
and after the master MCU determines that the slave MCU enters the master control mode, the master MCU starts the OTA flash engine of the master MCU and executes software upgrading.
405: the auxiliary MCU monitors the software upgrading state information of the main MCU and judges whether the software upgrading of the main MCU is normal or not;
and after the main MCU starts software upgrading, the slave MCU monitors the OTA upgrading process and state of the main MCU through the SPI3 and the Limp home signal of the main MCU. And if the auxiliary MCU monitors that the software flashing of the main MCU and the Limp home state are normal in the software updating process, executing 411, otherwise, executing 406.
406: if the main MCU is abnormally upgraded, the auxiliary MCU resets the main MCU power module SBC1 through an EN1 pin, resets the main MCU of the auxiliary MCU, and sends a re-upgrading instruction to the main MCU through the SPI 3;
if the upgrading process and the state of the main MCU are abnormal (including the upgrading data frame period and the abnormal sequence), the auxiliary MCU resets the power supply module of the main MCU through an EN1 pin controlling a SBC1 power module of the main MCU to reset the main MCU, and simultaneously informs the main MCU to restart an OTA engine through an SPI3/CAN2 to upgrade software.
407: judging whether the retry times of the software upgrading of the main MCU reach 3 times or not;
in this embodiment, the OTA engine is restarted a maximum number of times of 3 times.
408: if the number of times exceeds 3, the auxiliary MCU resets the main MCU power module SBC1 through the EN1 pin again to reset the main MCU;
409: the auxiliary MCU performs backup software flash on the main MCU through the SPI3, so that the main MCU software returns to the previous version;
and adopting a backup software package in an auxiliary MCU storage module Flash2 to perform software Flash on the main MCU through SPI3/CAN2, so that the software version of the main MCU is restored to the version before Flash.
410: the auxiliary MCU informs the central gateway of flash identification and simultaneously informs the main MCU to enter a master control mode;
and the auxiliary MCU informs the central gateway of the OTA software upgrading failure of the domain controller through the CAN2 of the auxiliary MCU, and simultaneously informs the main MCU to enter a master control mode to take over the functions of the domain controller.
411: whether the software main MCU upgrading is finished or not is judged;
412: the main MCU informs the auxiliary MCU to exit the main control mode;
and after the software of the main MCU is updated, the main MCU informs the auxiliary MCU to exit the master control mode.
413: and the main MCU enters a main control mode, and the software upgrading is finished.
And informing the central security gateway that the OTA software is successfully upgraded.
In the scheme, in the process of upgrading the main microprocessor, the auxiliary microprocessor is switched to the main control mode to control the vehicle, normal operation of the vehicle in the upgrading process of the main microprocessor can be guaranteed, when the main microprocessor is in trouble in upgrading, the software version of the main microprocessor can be restored to the previous version, the domain controller function loss caused by OTA (over the air) flash failure, data incompleteness, upgrading packet errors, upgrading terminals and other problems can be avoided, and safe and reliable upgrading of domain controller software is guaranteed.
In a second aspect, based on the same inventive concept, an embodiment of the present specification provides a domain controller software upgrading apparatus, where a domain controller includes a main microprocessor and an auxiliary microprocessor, and referring to fig. 5, the apparatus includes:
a control module 51, configured to control the auxiliary microprocessor to enter a master control mode if a software upgrade request for the domain controller is detected;
a first upgrade module 52, configured to upgrade software of the main microprocessor based on the acquired software upgrade package;
the monitoring module 53 is configured to monitor the upgrade status of the main microprocessor through the auxiliary microprocessor in the software upgrade process of the main microprocessor, and obtain monitoring information;
a determining module 54, configured to determine whether the upgrade of the host microprocessor is successful based on the monitoring information.
Optionally, the domain controller comprises a main power supply module for supplying power to the main microprocessor, and the determining module 54 is configured to:
when the monitoring information indicates that the upgrading state of the main microprocessor is abnormal, the auxiliary microprocessor controls the main power supply module to reset so as to reset the main microprocessor;
determining the current reset times of the main microprocessor, and determining whether the reset times are greater than preset times;
and if so, determining that the upgrading of the main microprocessor fails.
Optionally, the apparatus further comprises:
and the second upgrading module is used for upgrading the software of the main microprocessor again based on the software upgrading package if the resetting times are less than or equal to the preset times.
Optionally, the domain controller includes an auxiliary storage module, where the auxiliary storage module stores a backup software upgrade package of a previous version, and the apparatus further includes:
and the software recovery module is used for recovering the software version of the main microprocessor to the previous version based on the backup software upgrading package after the upgrading of the main microprocessor fails.
Optionally, the apparatus further comprises:
and the first control module is used for controlling the auxiliary microprocessor to exit the master control mode and controlling the main microprocessor to enter the master control mode after the main microprocessor is successfully upgraded.
Optionally, the domain controller includes an auxiliary storage module, where the auxiliary storage module stores a backup software upgrade package of a previous version, and the apparatus further includes:
the first detection module is used for detecting whether the auxiliary microprocessor receives a handshake signal sent by the main microprocessor within a first preset time length in the upgrading process of the main microprocessor;
and the second control module is used for restoring the software version of the main microprocessor to the previous version based on the backup software upgrading package and controlling the auxiliary microprocessor to enter the master control mode when the auxiliary microprocessor does not receive the handshake signal sent by the main microprocessor within the first preset time.
Optionally, the apparatus further comprises:
the second detection module is used for detecting whether the auxiliary microprocessor receives the Lipp home signal sent by the main microprocessor within a second preset time length or not and determining whether the Lipp home signal is accurate or not;
and the third control module is used for controlling the main microprocessor to enter the main control mode and controlling the auxiliary microprocessor to exit the main control mode when the auxiliary microprocessor does not receive a correct Lipmp home signal within a second preset time length.
With regard to the above-mentioned apparatus, the specific functions of the respective modules have been described in detail in the embodiment of the domain controller software upgrading method provided in the embodiment of the present specification, and will not be elaborated herein.
In a third aspect, an embodiment of the present specification provides a domain controller, as shown in fig. 6, including:
a main microprocessor 61, an auxiliary microprocessor 62;
the main microprocessor 61 is in communication connection with the auxiliary microprocessor 62;
the auxiliary microprocessor 62 is used for entering a master control mode when detecting a software upgrading request aiming at the domain controller;
the main microprocessor 61 is used for upgrading based on the acquired software upgrading package;
in the process of upgrading the software of the main microprocessor 61, the auxiliary microprocessor 62 is configured to monitor the upgrade status of the main microprocessor 61, obtain monitoring information, and determine whether the upgrade of the main microprocessor 61 is successful based on the monitoring information.
Optionally, the domain controller further comprises:
the main storage module 63 is in communication connection with the main microprocessor 61 and is used for storing a software upgrading package;
an auxiliary storage module 64, communicatively connected to the auxiliary microprocessor 62, for storing the backup software upgrade package of the previous version;
a main power supply module 65 connected to the main microprocessor 61 and the main storage module 63, for supplying power to the main microprocessor 61 and the main storage module 63;
and an auxiliary power module 66 connected to the auxiliary microprocessor 62 and the auxiliary memory module 64 for supplying power to the auxiliary microprocessor 62 and the auxiliary memory module 64.
The main microprocessor 61 and the auxiliary microprocessor 62 are connected through SPI and Limp home communication. The domain controller and the exterior of the OTA terminal of the vehicle CAN communicate through the CAN. The main microprocessor 61 may be connected to an auxiliary power module 66, and the auxiliary microprocessor 62 may be connected to a main power module 65.
In addition, the domain controller further includes a main communication module and an auxiliary communication module respectively connected to the main microprocessor 61 and the auxiliary microprocessor 62.
With regard to the above-mentioned apparatus, the specific functions of the respective modules have been described in detail in the embodiment of the domain controller software upgrading method provided in this specification, and will not be elaborated here.
In a fourth aspect, based on the inventive concept of the domain controller-based software upgrading method in the foregoing embodiments, this specification embodiment further provides a computer-readable storage medium, on which a computer program is stored, and the program, when executed by a processor, implements the steps of any one of the foregoing domain controller-based software upgrading methods.
The description has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the description. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While preferred embodiments of the present specification have been described, additional variations and modifications in those embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including preferred embodiments and all changes and modifications that fall within the scope of the specification.
It will be apparent to those skilled in the art that various changes and modifications may be made in the present specification without departing from the spirit and scope of the specification. Thus, if such modifications and variations of the present specification fall within the scope of the claims of the present specification and their equivalents, the specification is intended to include such modifications and variations.
Claims (10)
1. A domain controller software upgrading method is characterized in that a domain controller comprises a main microprocessor and an auxiliary microprocessor, the main microprocessor and the auxiliary microprocessor are respectively provided with an independent power module, a data storage module and a communication module, the power module of the main microprocessor supplies power for the communication module and the data storage module of the main microprocessor, the power module of the auxiliary microprocessor supplies power for the communication module and the data storage module of the auxiliary microprocessor, the data storage module of the main microprocessor is used for storing a software upgrading package, the data storage module of the auxiliary microprocessor is used for storing a backup software upgrading package, and the main microprocessor and the auxiliary microprocessor communicate through an SPI and a Limp home signal line, and the method comprises the following steps:
if a software upgrading request aiming at the domain controller is detected, controlling the auxiliary microprocessor to enter a main control mode, wherein the auxiliary microprocessor controls a vehicle in the main control mode so that the vehicle normally runs in the upgrading process of the main microprocessor;
upgrading the software of the main microprocessor based on the acquired software upgrading package;
in the process of software upgrading of the main microprocessor, monitoring the upgrading state of the main microprocessor through the auxiliary microprocessor to obtain monitoring information;
determining whether the main microprocessor is upgraded successfully based on the monitoring information;
and if the handshake signals received by the auxiliary microprocessor are abnormal, the vehicle is controlled to enter the downhill mode in the process that the main microprocessor sends the handshake signals to the auxiliary microprocessor in the main control mode.
2. The method of claim 1, wherein the domain controller includes a main power module for powering the main microprocessor, and wherein determining whether the main microprocessor is successfully upgraded based on the monitoring information comprises:
when the monitoring information indicates that the upgrading state of the main microprocessor is abnormal, the auxiliary microprocessor controls the main power supply module to reset so as to reset the main microprocessor;
determining the current reset times of the main microprocessor, and determining whether the reset times are greater than preset times;
and if so, determining that the upgrading of the main microprocessor fails.
3. The method of claim 2, wherein after determining whether the reset number is greater than a preset number, the method further comprises:
and if the reset times are less than or equal to the preset times, software upgrading is carried out on the main microprocessor again based on the software upgrading package.
4. The method of claim 1, wherein the domain controller comprises a secondary storage module storing a last version of a backup software upgrade package, and wherein after determining whether the primary microprocessor was successfully upgraded based on the monitoring information, the method further comprises:
and after the upgrading of the main microprocessor fails, restoring the software version of the main microprocessor to the previous version based on the backup software upgrading package.
5. The method of claim 1, wherein after determining whether the upgrade of the host microprocessor was successful based on the monitoring information, the method further comprises:
and after the main microprocessor is upgraded successfully, controlling the auxiliary microprocessor to exit the main control mode and controlling the main microprocessor to enter the main control mode.
6. The method of claim 1, wherein the domain controller comprises a secondary storage module storing a last version of a backup software upgrade package, the method further comprising:
in the upgrading process of the main microprocessor, detecting whether the auxiliary microprocessor receives a handshake signal sent by the main microprocessor within a first preset time;
if not, based on the backup software upgrading package, the software version of the main microprocessor is restored to the previous version, and the main microprocessor is controlled to enter a main control mode.
7. The method of claim 1 or 5, wherein after said determining whether said upgrade of said host microprocessor was successful, said method further comprises:
detecting whether the auxiliary microprocessor receives a Lipp home signal sent by the main microprocessor within a second preset time length or not, and determining whether the Lipp home signal is accurate or not;
and if so, controlling the main microprocessor to enter the main control mode, and controlling the auxiliary microprocessor to exit the main control mode.
8. A domain controller software upgrading device is characterized in that a domain controller comprises a main microprocessor and an auxiliary microprocessor, the main microprocessor and the auxiliary microprocessor are respectively provided with an independent power module, a data storage module and a communication module, the power module of the main microprocessor supplies power to the communication module and the data storage module of the main microprocessor, the power module of the auxiliary microprocessor supplies power to the communication module and the data storage module of the auxiliary microprocessor, the data storage module of the main microprocessor is used for storing a software upgrading package, the data storage module of the auxiliary microprocessor is used for storing a backup software upgrading package, the main microprocessor and the auxiliary microprocessor communicate through an SPI and a Limp home signal line, and the device comprises:
the control module is used for controlling the auxiliary microprocessor to enter a main control mode if a software upgrading request aiming at the domain controller is detected, wherein the auxiliary microprocessor controls the vehicle in the main control mode so as to ensure that the vehicle normally runs in the upgrading process of the main microprocessor;
the upgrading module is used for upgrading the software of the main microprocessor based on the acquired software upgrading package;
the monitoring module is used for monitoring the upgrading state of the main microprocessor through the auxiliary microprocessor in the process of upgrading the software of the main microprocessor to obtain monitoring information;
the determining module is used for determining whether the main microprocessor is upgraded successfully or not based on the monitoring information;
and in the process that the main microprocessor sends a handshake signal to the auxiliary microprocessor in the main control mode, if the handshake signal received by the auxiliary microprocessor is abnormal, the vehicle is controlled to enter the hill-going mode.
9. A domain controller, characterized in that the domain controller comprises:
a main microprocessor and an auxiliary microprocessor;
the main microprocessor and the auxiliary microprocessor are respectively provided with an independent power module, a data storage module and a communication module, the power module of the main microprocessor supplies power for the communication module and the data storage module of the main microprocessor, the power module of the auxiliary microprocessor supplies power for the communication module and the data storage module of the auxiliary microprocessor, the data storage module of the main microprocessor is used for storing a software upgrading package, and the data storage module of the auxiliary microprocessor is used for storing a backup software upgrading package;
the main microprocessor and the auxiliary microprocessor are communicated through an SPI and a Limp home signal line;
the auxiliary microprocessor is used for entering a master control mode when detecting a software upgrading request aiming at the domain controller;
the main microprocessor is used for upgrading based on the acquired software upgrading package;
and in the process of upgrading the software of the main microprocessor, the auxiliary microprocessor is used for monitoring the upgrading state of the main microprocessor, acquiring monitoring information and determining whether the main microprocessor is successfully upgraded or not based on the monitoring information, wherein the auxiliary microprocessor controls the vehicle in the main control mode so that the vehicle normally runs in the upgrading process of the main microprocessor.
10. The domain controller according to claim 9, wherein the domain controller further comprises:
the main storage module is in communication connection with the main microprocessor and used for storing the software upgrading package;
the auxiliary storage module is in communication connection with the auxiliary microprocessor and is used for storing the backup software upgrading package of the previous version;
the main power supply module is connected with the main microprocessor and the main storage module and used for supplying power to the main microprocessor and the main storage module;
and the auxiliary power module is connected with the auxiliary microprocessor and the auxiliary storage module and used for supplying power to the auxiliary microprocessor and the auxiliary storage module.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011287052.3A CN112559003B (en) | 2020-11-17 | 2020-11-17 | Domain controller software upgrading method and device and domain controller |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011287052.3A CN112559003B (en) | 2020-11-17 | 2020-11-17 | Domain controller software upgrading method and device and domain controller |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112559003A CN112559003A (en) | 2021-03-26 |
| CN112559003B true CN112559003B (en) | 2023-03-03 |
Family
ID=75044279
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011287052.3A Active CN112559003B (en) | 2020-11-17 | 2020-11-17 | Domain controller software upgrading method and device and domain controller |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112559003B (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113176771B (en) * | 2021-04-16 | 2023-04-14 | 重庆长安新能源汽车科技有限公司 | Method for monitoring running state of vehicle domain controller |
| CN113377404B (en) * | 2021-06-29 | 2023-07-18 | 深蓝汽车科技有限公司 | New energy vehicle domain controller safety monitoring chip program updating method and system |
| CN115242633B (en) * | 2022-06-23 | 2024-04-09 | 惠州华阳通用电子有限公司 | Vehicle-mounted equipment upgrading method and device based on USB Ethernet |
| CN116909609B (en) * | 2023-09-12 | 2023-12-22 | 英纳法智联科技(北京)有限公司 | Software upgrading method and device of vehicle-mounted intelligent equipment and vehicle-mounted intelligent equipment |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102646043A (en) * | 2012-02-29 | 2012-08-22 | 青岛海信移动通信技术股份有限公司 | Method and device for upgrading mobile terminal software and mobile terminal |
| CN109933347A (en) * | 2018-11-23 | 2019-06-25 | 航天恒星科技有限公司 | A kind of multi-embedding reliable upgrade method of formula processor software based on 1553B bus |
| CN109995628A (en) * | 2018-01-03 | 2019-07-09 | 联合汽车电子有限公司 | Automobile-used domain controller |
| CN111385191A (en) * | 2018-12-28 | 2020-07-07 | 联合汽车电子有限公司 | Vehicle-mounted interconnected gateway, vehicle OTA upgrading system and method and computer storage medium |
| CN111381844A (en) * | 2018-12-27 | 2020-07-07 | 中兴通讯股份有限公司 | Method and device for updating vehicle ECU firmware |
| CN111399870A (en) * | 2020-02-28 | 2020-07-10 | 浙江吉利新能源商用车集团有限公司 | Vehicle control method, device, terminal and storage medium |
| CN111459518A (en) * | 2020-03-30 | 2020-07-28 | 北京经纬恒润科技有限公司 | Vehicle ECU (electronic control Unit) upgrading method and system |
Family Cites Families (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105094875A (en) * | 2014-05-19 | 2015-11-25 | 中兴通讯股份有限公司 | Software upgrading method and device |
| CN106293824A (en) * | 2016-08-04 | 2017-01-04 | 青岛海信电器股份有限公司 | A kind of from the method and device processing chip upgrade |
| CN107809324B (en) * | 2016-09-07 | 2022-01-25 | 中兴通讯股份有限公司 | Vehicle-mounted automatic diagnosis system equipment and upgrading method thereof |
| CN107402847B (en) * | 2017-07-28 | 2020-05-19 | 安徽江淮汽车集团股份有限公司 | Remote upgrading method and system for vehicle control unit software |
| CN109541987B (en) * | 2018-10-17 | 2021-09-03 | 同济大学 | Plug-and-play intelligent automobile domain controller with redundancy structure and method |
| CN110221850A (en) * | 2019-05-05 | 2019-09-10 | 徐州威卡电子控制技术有限公司 | The method that a kind of pair of mechanically moving controller carries out remote upgrade |
| CN110737457A (en) * | 2019-07-18 | 2020-01-31 | 上海擎感智能科技有限公司 | Vehicle-mounted software processing method, system and terminal |
| CN110471680A (en) * | 2019-07-23 | 2019-11-19 | 武汉格罗夫氢能汽车有限公司 | Control method for the upgrading of hydrogen energy automobile controller software and failure rollback |
| CN110673864A (en) * | 2019-08-28 | 2020-01-10 | 绿驰汽车科技集团有限公司 | Upgrading monitoring method and system for vehicle-mounted software |
| CN111246422A (en) * | 2020-01-06 | 2020-06-05 | 新石器慧通（北京）科技有限公司 | Vehicle-mounted system hot start switching method |
| CN111338674A (en) * | 2020-02-25 | 2020-06-26 | 北京汽车集团有限公司 | Instruction processing method, device and equipment |
| CN111399884A (en) * | 2020-04-09 | 2020-07-10 | 东风小康汽车有限公司重庆分公司 | Vehicle component upgrading method and device and electronic equipment |
| CN111787378B (en) * | 2020-06-28 | 2022-06-28 | 海信视像科技股份有限公司 | Software upgrading method applied to remote control device and remote control device |
-
2020
- 2020-11-17 CN CN202011287052.3A patent/CN112559003B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102646043A (en) * | 2012-02-29 | 2012-08-22 | 青岛海信移动通信技术股份有限公司 | Method and device for upgrading mobile terminal software and mobile terminal |
| CN109995628A (en) * | 2018-01-03 | 2019-07-09 | 联合汽车电子有限公司 | Automobile-used domain controller |
| CN109933347A (en) * | 2018-11-23 | 2019-06-25 | 航天恒星科技有限公司 | A kind of multi-embedding reliable upgrade method of formula processor software based on 1553B bus |
| CN111381844A (en) * | 2018-12-27 | 2020-07-07 | 中兴通讯股份有限公司 | Method and device for updating vehicle ECU firmware |
| CN111385191A (en) * | 2018-12-28 | 2020-07-07 | 联合汽车电子有限公司 | Vehicle-mounted interconnected gateway, vehicle OTA upgrading system and method and computer storage medium |
| CN111399870A (en) * | 2020-02-28 | 2020-07-10 | 浙江吉利新能源商用车集团有限公司 | Vehicle control method, device, terminal and storage medium |
| CN111459518A (en) * | 2020-03-30 | 2020-07-28 | 北京经纬恒润科技有限公司 | Vehicle ECU (electronic control Unit) upgrading method and system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN112559003A (en) | 2021-03-26 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112559003B (en) | Domain controller software upgrading method and device and domain controller | |
| EP3528118B1 (en) | Software update device, software update method, and software update system | |
| CN109669708B (en) | Remote upgrading method for modular Internet of things terminal equipment | |
| US9557981B2 (en) | Method and apparatus for automatic module upgrade | |
| EP3725604A1 (en) | Electric power control method and system for use in changing vehicle battery | |
| CN110758483A (en) | Method, apparatus, device and medium for remote restart | |
| US9889762B2 (en) | Control system for charging vehicle battery in response to an unstable state | |
| CN113497819A (en) | Remote upgrade security guarantee method and system and vehicle-mounted Tbox equipment | |
| CN113626056A (en) | Vehicle remote upgrading method and device, electronic equipment, vehicle-mounted terminal and storage medium | |
| CN110995724A (en) | Remote upgrading method for whole vehicle controller of new energy bus | |
| US9817741B2 (en) | Method for monitoring an apparatus connected to a communication channel | |
| CN109664902B (en) | Rail vehicle and human-computer interaction system thereof | |
| CN111610981A (en) | BMS board online writing method and device | |
| CN105700489B (en) | A kind of monitoring method and car-mounted terminal of electric car | |
| CN116088903A (en) | Vehicle software upgrading method and device, vehicle, equipment and storage medium | |
| US20220317994A1 (en) | Ota master, update control method, and non-transitory storage medium | |
| WO2022095896A1 (en) | Method for managing ecu on vehicle, and ecu and readable storage medium | |
| CN115390539A (en) | Vehicle abnormal dormancy diagnosis method and device, vehicle and storage medium | |
| US10899238B2 (en) | Control apparatus including a key hold function of supplying power to a controller and control method thereof | |
| CN114026537A (en) | Method for carrying out a dialogue with a computer on a vehicle bus of a vehicle | |
| CN112799370B (en) | Control device, and vehicle-mounted system software restoration method and system | |
| CN115877777B (en) | Intelligent cabin safety system and method based on one-core multi-system | |
| CN117370068A (en) | OTA upgrading failure processing method, device and system | |
| CN115583179B (en) | Battery management method and system for new energy engineering vehicle | |
| CN116225477A (en) | ECU remote upgrading method and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |